Vulnerabilities (CVE)

Filtered by vendor B3log Subscribe
Filtered by product Siyuan
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-53505 1 B3log 1 Siyuan 2025-04-14 N/A 9.8 CRITICAL
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent.
CVE-2024-53506 1 B3log 1 Siyuan 2025-04-14 N/A 9.8 CRITICAL
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs.
CVE-2024-53507 1 B3log 1 Siyuan 2025-04-14 N/A 9.8 CRITICAL
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems.
CVE-2024-53504 1 B3log 1 Siyuan 2025-04-14 N/A 9.8 CRITICAL
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory.